$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: ZUBsaxRTsiapSKynERqoNkrbZ15c7lhGrAlw1lbI0GQ= Subject key identifier: FA:5E:82:6F:49:E3:B1:D5:B4:38:D4:FC:3F:EC:4F:3E:7D:0B:00:DE Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849A61F42771B6C6B82217B5880 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:42:77:1b:6c:6b:82:21:7b:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=1a7b0807-380f-4164-9261-339e9042c8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:98:19:f1:2c:b4:93:e9:30:a6:cb:cf:ff:56: d7:d0:61:c5:ae:fd:cc:4f:47:d5:98:67:dd:ee:eb: b4:25:dc:a7:11:d6:6b:dd:aa:b8:a5:61:ab:c6:1d: 4a:10:6d:c9:03:97:77:84:4e:81:66:72:4d:77:7c: e0:29:53:5c:24:48:5c:cb:e5:48:89:61:46:b9:70: f0:21:f7:8b:ee:7e:f2:0b:63:21:c8:21:ba:35:48: 96:0e:ad:44:5f:19:54:d0:4d:7a:b6:77:40:2d:7a: 5e:df:de:ca:f2:fb:7a:d8:0f:3a:d6:7c:c1:84:43: 7a:4d:b4:4a:80:9c:16:2b:b8:a4:ae:b1:82:33:0d: d9:e5:5e:ac:aa:dd:10:90:d5:5f:03:5c:66:c4:93: d5:fb:2e:29:7f:71:6e:bd:dc:08:f5:09:7f:e9:11: eb:17:ce:55:d9:ad:04:a2:78:cc:a9:3f:80:a7:c4: df:74:62:9a:1d:1f:48:48:45:6d:09:94:86:b6:c7: 87:c3:64:18:ef:f2:6f:d0:b3:d2:c0:c8:dd:be:50: 97:4e:f7:b7:eb:9c:24:9a:41:37:37:37:8a:bc:5f: 50:95:80:df:ac:3a:75:67:98:18:01:1d:eb:4a:75: ae:12:c2:f7:3c:a6:b4:ea:83:81:ea:77:8d:75:3d: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5E:82:6F:49:E3:B1:D5:B4:38:D4:FC:3F:EC:4F:3E:7D:0B:00:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:26:8c:b6:b7:5a:36:c2:5e:9f:c8:5c:89:cf:6d:c8:62:49: 8c:00:c7:31:82:b7:2d:75:65:f9:4d:f5:1f:a6:74:14:34:b2: 6c:a7:66:50:c0:79:65:0b:f0:1c:2f:a5:9c:58:a9:44:77:ee: f6:35:4b:8f:de:2d:b5:2b:f2:92:00:a4:6d:7d:59:9b:3d:c5: 85:98:c2:51:40:f3:93:bb:75:58:43:35:7e:8d:ca:d0:0b:8f: 6e:7d:a3:42:a3:d2:12:4f:65:35:1f:39:f2:a1:22:d6:6c:a8: 8f:03:ff:00:7f:18:16:3e:fd:33:93:ed:bb:ec:3f:78:70:4c: e2:61:27:8a:2c:f8:92:84:ff:33:db:25:50:a4:0b:61:f6:c1: 2a:a0:0f:00:54:51:ff:25:13:1d:ca:75:26:a6:c4:08:4d:b7: 6d:f3:6c:79:7e:7f:3d:3f:36:49:8f:78:46:7d:51:a6:35:24: 17:b0:9e:58:a8:98:4a:65:41:4b:46:21:6b:0b:fa:94:56:dc: 02:78:91:f8:f4:81:a2:05:27:c4:d4:80:ed:4b:d7:68:5b:ac: 45:af:62:fb:ae:a4:00:26:64:95:5b:e3:f6:ac:33:8c:f2:b2: e7:dc:58:4f:37:13:7a:30:7a:99:a5:c0:49:ba:c8:3d:32:6f: c7:69:a6:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0J3G2xrgiF7WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MWE3YjA4MDctMzgwZi00MTY0LTkyNjEtMzM5ZTkwNDJjOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJgZ8Sy0k+kwpsvP/1bX0GHFrv3MT0fVmGfd 7uu0JdynEdZr3aq4pWGrxh1KEG3JA5d3hE6BZnJNd3zgKVNcJEhcy+VIiWFGuXDw IfeL7n7yC2MhyCG6NUiWDq1EXxlU0E16tndALXpe397K8vt62A861nzBhEN6TbRK gJwWK7ikrrGCMw3Z5V6sqt0QkNVfA1xmxJPV+y4pf3FuvdwI9Ql/6RHrF85V2a0E onjMqT+Ap8TfdGKaHR9ISEVtCZSGtseHw2QY7/Jv0LPSwMjdvlCXTve365wkmkE3 NzeKvF9QlYDfrDp1Z5gYAR3rSnWuEsL3PKa06oOB6neNdT2CQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpegm9J47HVtDjU/D/sTz59CwDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYmjLa3WjbCXp/IXInPbchiSYwAxzGCty11ZflN9R+mdBQ0smynZlDA eWUL8BwvpZxYqUR37vY1S4/eLbUr8pIApG19WZs9xYWYwlFA85O7dVhDNX6NytAL j259o0Kj0hJPZTUfOfKhItZsqI8D/wB/GBY+/TOT7bvsP3hwTOJhJ4os+JKE/zPb JVCkC2H2wSqgDwBUUf8lEx3KdSamxAhNt23zbHl+fz0/NkmPeEZ9UaY1JBewnlio mEplQUtGIWsL+pRW3AJ4kfj0gaIFJ8TUgO1L12hbrEWvYvuupAAmZJVb4/asM4zy sufcWE83E3owepmlwEm6yD0yb8dppsc= -----END CERTIFICATE-----Generated at Tue Apr 29 09:36:12 2025 by rpki-client